Privacy Notice

What we collect & why

• Information you provide: name, email, and the content of messages you send (e.g., through a contact form or direct email) so we can reply and keep basic records of communications.
• Technical logs (automatic): IP address, browser/user agent, timestamps, pages viewed, and similar diagnostics captured by our host/CDN to run the Site securely and prevent abuse. We host on Cloudflare Pages/Workers, which processes traffic and may log request metadata.
• Analytics (optional):
  • Cloudflare Web Analytics (aggregated, privacy-centric; no client-side cookies/fingerprinting) to understand Site usage.
  • Google Analytics (GA4) to understand Site usage. In the EEA/UK, we will obtain consent before loading GA and will honor that choice.

We operate an informational website only; the open-source software is used under its own license (see Site Terms).

Legal bases (EU/UK GDPR)

• Legitimate interests: operating, securing, and improving the Site (hosting, security, basic logging, fraud/abuse prevention).
• Consent (where required): any non-essential analytics or similar technologies (e.g., GA4 in the EEA/UK).

Cookies & similar tech

• We aim to avoid non-essential cookies.
• If we use only Cloudflare Web Analytics, we do not set analytics cookies.
• If we use GA4 or other non-essential trackers, we show a consent banner in the EEA/UK and load tags only after consent.

Sharing & service providers

We do not sell personal information. We use service providers (processors) only to operate the Site:

• Hosting/CDN: Cloudflare
• Email: Resend
• Analytics (optional): Cloudflare Web Analytics and/or Google Analytics

These providers process personal data only to provide their services to us under contract.

Retention

• Server/edge logs: typically kept ≤30 days unless needed for security/legal reasons.
• Contact messages: kept up to 24 months after our last interaction.
• Analytics: retained per the tool's settings (e.g., GA4's configurable retention).

We may retain data longer to comply with law or defend legal rights.

Your choices & rights

• You can refuse or withdraw consent for non-essential analytics (via our banner in the EEA/UK).
• You can email info@eclaire.co to request access, correction, deletion, or to object/restrict processing where applicable. We may ask you to verify your identity.
• If you're in the EEA/UK, you can also lodge a complaint with your local supervisory authority.

California notices

• We conspicuously post this Privacy Notice because we may collect personal information from California residents.
• Do Not Track (DNT): browsers may send DNT signals; we don't track you across third-party sites for targeted advertising.
• Global Privacy Control (GPC): If we ever "sell" or "share" personal information under California law, we will honor GPC as an opt-out method. Currently, we do not sell or share personal information.

Children

The Site is not directed to children under 13, and we don't knowingly collect their personal information. If you believe a child provided personal information, contact us to delete it.

International transfers

We and our providers may process data outside your country. Where required, we rely on standard safeguards (e.g., Standard Contractual Clauses and/or participation in an approved data-transfer framework).

Security

We use reasonable technical and organizational measures appropriate to the risk. No method of transmission or storage is 100% secure.

Changes

We may update this Notice. We'll post changes here and update the Effective date above.